[tyingq]

The screenshot shows that the plaintext password was sent over SMTP. So it isn't meeting that bar either.

[bausshf]

What makes you think it's SMTP and not SMTPS?

[tyingq]

Because you can't force the endpoints of your customers to all support that.